Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC0C9F024CC11F0B90354ADDAE4EC9C.roa
File: ABC0C9F024CC11F0B90354ADDAE4EC9C.roa (raw, json)
Hash identifier: ZqEM7MCtUDfhIY3lSSx+XfDV1U4LAF6d0rNdjpNfd78=
Subject key identifier: F3:7C:66:5D:E1:05:CD:D6:0E:79:6F:B2:3A:39:F8:7A:88:8D:76:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01501F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC0C9F024CC11F0B90354ADDAE4EC9C.roa
Signing time: Tue 29 Apr 2025 07:36:33 +0000
ROA not before: Tue 29 Apr 2025 07:36:28 +0000
ROA not after: Thu 05 Jun 2025 07:36:28 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 May 2025 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86047 (0x1501f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 07:36:28 2025 GMT
Not After : Jun 5 07:36:28 2025 GMT
Subject: CN=68108180-8d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:1c:3d:f3:74:eb:0e:67:31:61:14:54:d6:
92:63:da:ed:be:f9:73:17:1e:cc:2f:32:c5:84:34:
6a:ba:b7:be:54:81:4c:6f:74:df:75:30:ed:24:fb:
09:8b:fa:e5:de:8f:cf:23:7a:8c:d1:87:d1:1a:70:
18:44:b2:9b:18:10:be:7f:5b:01:83:53:c5:bc:a2:
be:db:32:f6:64:ea:c4:49:ca:12:a8:a2:eb:76:d7:
bc:d3:c4:3d:0e:93:b8:2c:37:c2:2e:bb:0c:dd:13:
f3:82:4b:f8:c8:57:79:d4:bc:04:18:a5:40:14:43:
aa:c9:a9:6a:66:e2:4a:d6:5a:3e:33:e8:72:cb:0b:
b4:fb:25:50:80:7e:62:15:ce:ab:9e:7a:a3:f5:fd:
60:18:18:03:2c:a4:7f:31:d3:d5:9e:44:08:52:c8:
e6:15:c4:e3:5a:b7:d3:62:1d:26:ce:a9:41:89:28:
2d:48:cb:2a:31:de:8b:87:22:87:52:d6:d4:1f:6c:
9d:12:bb:1b:4b:5b:82:48:94:c4:0d:dd:14:e1:12:
c2:0f:71:0b:8d:2b:57:6a:d1:af:7e:e3:27:6f:b5:
98:45:17:c8:94:e2:fd:27:0a:de:61:05:d6:10:f6:
3e:53:c9:bf:a3:7a:68:06:17:09:a5:9f:af:9c:5e:
6b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7C:66:5D:E1:05:CD:D6:0E:79:6F:B2:3A:39:F8:7A:88:8D:76:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ABC0C9F024CC11F0B90354ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
69:1b:ff:37:38:35:ce:0a:52:5b:56:b5:33:f9:74:24:1c:ae:
9e:be:dd:d9:19:ba:ca:6d:33:1f:a3:2f:67:69:ac:f3:23:7f:
29:8f:b8:0b:46:f3:31:98:e2:ca:b8:e2:c1:07:85:c1:56:0e:
26:4b:73:4d:79:3e:54:72:81:56:96:7e:ae:96:69:80:bd:ac:
62:d8:e8:03:6c:c3:3c:45:ce:f2:e9:7e:14:5b:bb:1e:ad:b2:
55:67:85:84:90:64:00:06:e0:cd:be:87:2d:b3:6c:ae:21:c8:
fa:04:b2:45:64:f5:ac:3b:d0:1c:b6:e1:ff:c0:a1:54:de:d8:
32:fe:ff:8e:2a:59:f2:5c:c6:3b:89:70:ab:c1:3d:53:06:17:
22:f8:52:52:7f:e0:21:e0:18:a1:f6:c7:03:4f:c7:5c:ff:2c:
e7:bb:35:b4:e9:b3:b5:20:21:ff:57:20:88:b6:dc:41:48:40:
27:5b:06:d6:7d:00:2e:ce:6f:bf:dd:a3:72:97:8e:ca:61:45:
7e:41:d5:3c:a0:fc:22:0d:40:9e:53:4d:28:62:1f:6e:a0:bc:
5f:82:62:43:01:c5:08:01:e6:5a:99:da:d4:9a:16:13:f8:96:
7a:3a:c8:18:60:6b:8b:c8:8c:f1:a9:46:ee:e8:92:41:bd:00:
80:b7:d0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:25:57 2025 by rpki-client